$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft File: o0K4Har3eauhbTK2-wuDD4ULT_A.mft (raw, json) Hash identifier: 7bBRN09Cu6FDWqq6Rm1csnOPr1NW0IvkCSTXobXZoQM= Subject key identifier: 4C:2E:04:12:31:17:7E:A7:22:6F:D4:A3:3F:70:3E:27:4A:8D:5F:D9 Authority key identifier: A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 Certificate issuer: /CN=A91A1205/serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Certificate serial: 0C21 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft Manifest number: 0C1B Signing time: Sat 18 Oct 2025 19:30:39 +0000 Manifest this update: Sat 18 Oct 2025 19:30:39 +0000 Manifest next update: Sat 25 Oct 2025 19:30:39 +0000 Files and hashes: 1: o0K4Har3eauhbTK2-wuDD4ULT_A.crl (hash: Hr1Iq/n2PwClUF8+bPRgqABX0i3OnYHUQpLcVDb8AXk=) 2: 3D992D3A1A8411EAA026D229C4F9AE02.roa (hash: j0DWhsEHoal3Q4LsD1CyE+J4i6jhKjEMjW9pXFwYCvw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:30:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3105 (0xc21) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1205, serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0 Validity Not Before: Oct 18 19:30:39 2025 GMT Not After : Oct 25 19:30:39 2025 GMT Subject: CN=68f3eadf-9e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a0:58:7e:02:1d:7f:71:b8:ba:38:b0:ec:94: 3a:b1:a5:6b:37:44:85:e1:18:b2:b2:32:79:9b:c2: b9:ae:fd:b3:52:b9:cd:00:47:bc:49:fc:47:c1:f1: d6:d3:b5:13:3b:ab:b3:d5:c8:fc:04:90:3f:50:ee: 0e:61:69:2e:b7:57:34:f3:a9:21:15:42:69:f9:53: 45:6a:06:c2:95:f2:c9:ae:36:1e:d7:19:19:b1:51: b8:2c:dd:8a:b6:a9:1b:87:f2:73:3f:79:b4:cc:f5: 73:25:c3:42:8f:09:85:0e:39:75:cd:92:9a:39:93: 95:26:94:56:98:b3:2f:2f:94:80:70:d8:de:de:56: 39:ba:6b:a5:c1:01:03:bc:d5:25:e7:aa:53:d3:95: 3d:da:7a:27:ae:0c:11:0d:9b:f2:b9:fa:83:b6:08: 7e:88:b2:2f:77:d8:cb:83:0b:4c:7d:15:66:45:4a: c8:0b:dc:a0:19:a5:85:01:2d:b7:ee:0f:b2:81:ce: 73:23:08:e6:25:b0:03:92:bc:af:1e:d4:49:7e:a7: 04:b2:d3:e5:ed:4b:9e:25:87:ef:39:6f:3c:d5:91: 8e:bf:4e:68:dc:32:93:e4:c1:4a:9c:ef:73:64:38: 95:80:5d:85:b9:c4:ea:02:a5:3a:a4:c8:0e:88:ce: 3a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:2E:04:12:31:17:7E:A7:22:6F:D4:A3:3F:70:3E:27:4A:8D:5F:D9 X509v3 Authority Key Identifier: keyid:A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:65:a1:b0:23:b8:71:ee:7e:1d:9b:f1:24:ed:c8:2f:43:00: f7:5a:1e:42:8f:59:73:1e:fc:71:a1:14:82:be:9d:0c:0a:df: 9c:f2:56:af:24:4d:59:81:c1:a2:c1:d7:71:2f:ac:10:6b:e7: f4:86:80:6a:f6:65:78:d8:9e:7a:90:98:4f:fe:5c:6d:5c:a7: b1:f0:a6:ad:7a:c3:4f:9d:36:34:59:35:ff:85:3a:c1:af:67: 53:88:6e:20:18:98:0f:12:3e:88:d8:ab:1e:9f:2b:39:3a:4c: ee:da:90:90:9a:e4:17:a6:a8:f9:c7:59:e8:58:c8:1e:d5:e7: b9:37:b0:2b:69:b5:c4:f0:cb:ae:65:67:3c:98:43:88:1e:cb: 64:00:eb:3b:fd:40:ee:86:7d:c7:28:81:bd:62:76:10:04:55: 99:5a:d2:bb:70:0c:d8:7e:25:ca:2f:a1:eb:57:e1:3e:e3:c1: de:0f:83:13:8a:36:19:0a:ff:5c:e6:91:1b:c6:5b:15:cd:f2: d3:f3:51:47:74:f4:1e:8c:b5:23:8b:6e:db:30:d9:64:aa:08: 8a:de:c0:d8:81:82:0b:ce:f1:77:75:ec:18:0b:a3:7f:40:b7: 80:10:a7:8a:26:8d:8c:3f:27:ea:95:21:10:92:e2:05:82:af: a3:05:b7:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEyMDUxMTAvBgNVBAUTKEEzNDJCODFEQUFGNzc5QUJBMTZEMzJCNkZCMEI4MzBG ODUwQjRGRjAwHhcNMjUxMDE4MTkzMDM5WhcNMjUxMDI1MTkzMDM5WjAYMRYwFAYD VQQDEw02OGYzZWFkZi05ZTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvKBYfgIdf3G4ujiw7JQ6saVrN0SF4RiysjJ5m8K5rv2zUrnNAEe8SfxHwfHW 07UTO6uz1cj8BJA/UO4OYWkut1c086khFUJp+VNFagbClfLJrjYe1xkZsVG4LN2K tqkbh/JzP3m0zPVzJcNCjwmFDjl1zZKaOZOVJpRWmLMvL5SAcNje3lY5umulwQED vNUl56pT05U92nonrgwRDZvyufqDtgh+iLIvd9jLgwtMfRVmRUrIC9ygGaWFAS23 7g+ygc5zIwjmJbADkryvHtRJfqcEstPl7UueJYfvOW881ZGOv05o3DKT5MFKnO9z ZDiVgF2FucTqAqU6pMgOiM46LQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEwuBBIx F36nIm/Uoz9wPidKjV/ZMB8GA1UdIwQYMBaAFKNCuB2q93mroW0ytvsLgw+FC0/w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTIwNS83RDIzMUUwNDFB NTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2VhdWhiVEsyLXd1REQ0VUxU X0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL28wSzRIYXIzZWF1aGJUSzItd3VERDRVTFRfQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTIwNS83RDIzMUUwNDFBNTUxMUVBODgwNDIyMTFDNEY5QUUwMi9vMEs0SGFyM2Vh dWhiVEsyLXd1REQ0VUxUX0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFZaGwI7hx7n4dm/Ek7cgvQwD3Wh5Cj1lzHvxxoRSCvp0MCt+c8lav JE1ZgcGiwddxL6wQa+f0hoBq9mV42J56kJhP/lxtXKex8KatesNPnTY0WTX/hTrB r2dTiG4gGJgPEj6I2Ksenys5Okzu2pCQmuQXpqj5x1noWMge1ee5N7ArabXE8Muu ZWc8mEOIHstkAOs7/UDuhn3HKIG9YnYQBFWZWtK7cAzYfiXKL6HrV+E+48HeD4MT ijYZCv9c5pEbxlsVzfLT81FHdPQejLUji27bMNlkqgiK3sDYgYILzvF3dewYC6N/ QLeAEKeKJo2MPyfqlSEQkuIFgq+jBbex -----END CERTIFICATE-----Generated at Sun Oct 19 23:31:56 2025 by rpki-client